Posts made in June, 2017

The media is full of stories about how phishing sites are moving rapidly to encryption using anonymous, free DV certificates they use to imitate login pages for popular sites, such as paypal.com. As noted in the article “PayPal Phishing Certificates Far More Prevalent than Previously Thought”, https://www.thesslstore.com/blog/lets-encrypt-phishing/, more than 14,000 DV SSL certificates have been issued to PayPal phishing sites since the start of 2016. Based on a random sample, 96.7% of these certificates were intended for use on phishing sites. A typical certificate will be for a lengthy...